Kaynağa Gözat

[Rspamd] Set rspamd as trusted host, rspamd is not spoofing

andryyy 5 yıl önce
ebeveyn
işleme
5f73629493

+ 1 - 1
data/conf/rspamd/local.d/composites.conf

@@ -17,7 +17,7 @@ SOGO_CONTACT_SPOOFED {
   expression = "(R_SPF_PERMFAIL | R_SPF_SOFTFAIL | R_SPF_FAIL) & ~SOGO_CONTACT";
 }
 SPOOFED_UNAUTH {
-  expression = "!MAILCOW_AUTH & !MAILCOW_WHITE & !R_SPF_ALLOW & !DMARC_POLICY_ALLOW & !ARC_ALLOW & !SIEVE_HOST & MAILCOW_DOMAIN_HEADER_FROM";
+  expression = "!MAILCOW_AUTH & !MAILCOW_WHITE & !R_SPF_ALLOW & !DMARC_POLICY_ALLOW & !ARC_ALLOW & !RSPAMD_HOST & !SIEVE_HOST & MAILCOW_DOMAIN_HEADER_FROM";
   score = 5.0;
 }
 # Only apply to inbound unauthed and not whitelisted

+ 6 - 0
data/conf/rspamd/local.d/multimap.conf

@@ -90,6 +90,12 @@ SIEVE_HOST {
   symbols_set = ["SIEVE_HOST"];
 }
 
+RSPAMD_HOST {
+  type = "ip";
+  map = "$LOCAL_CONFDIR/custom/rspamd_trusted.map";
+  symbols_set = ["RSPAMD_HOST"];
+}
+
 MAILCOW_DOMAIN_HEADER_FROM { 
   type = "header";  
   header = "from";